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We propose a scheme for multiparty hierarchical quantum-information splitting (QIS) with a 
multipartite entangled state, where a boss distributes a secret quantum state to two grades of 
agents asymmetrically. The agents who belong to different grades have different authorities for 
recovering boss's secret. Except for boss's Bell-state measurement, no nonlocal operation is in- 
volved. The presented scheme is also shown to be secure against eavesdropping. Such a hierarchical 
QIS is expected to find useful applications in the field of modern multipartite quantum cryptography. 
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o\ . 

A fundamental ingredient for implementation of quantum technologies is the ability to faithfully transmit 
quantum states among quantum mechanical systems which are even far apart. Quantum-information splitting 
(QIS, also be referred to as quantum-secret sharing or quantum-state sharing in the literature), first introduced 
by Hillery, Buzek, and Berthiaume (HBB) [1], is a typical way for quantum state transfer, in which a secret 
quantum state is distributed by quantum teleportation [2] from a boss to more than one agents so that any 
one of them can recover the state with assistance of the others. QIS is a generalization of classical-secret 
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sharing to quantum scenario. Classical-secret sharing is one of the most important information-theoretically 
secure cryptographic protocols and is germane to online auctions, electronic voting, shared electronic banking, 
cooperative activation of bombs, and so on. Also, QIS has extensive applications in quantum-information 
science, such as creating joint checking accounts containing quantum money secure distributed quantum 
computation 0, Q , and so on. 

In the original HBB QIS proposal with the quantum channel being a three-qubit Greenberger-Horne-Zeilinger 
(GHZ) state [6(, the collaboration of two agents is implemented by means of classical communication about 
their single-particle measurement outcomes. This idea can be directly generalized to the case of N agents by 
using an (N + l)-particle GHZ state, or by the way of Ref. These schemes are (N, iV)-threshold schemes 
where all the N agents need collaborating in order to recover the secret state. Soon after, Cleve, Gottesman, 
and Lo (CGL) Q proposed another type of QIS scheme with the idea of quantum error-correcting codes. The 
CGL scheme is a (K, A)-threshold scheme where K {[N/2] < K < N) of N agents can extract the quantum 
information of the original secret state by cooperation. The CGL QIS scheme, however, needs the cooperated 
agents to make nonlocal operations on their particles. That is, the K cooperated agents need to transmit their 
K particles to one laboratory and perform a collective operation (decoding operation) on them. In the last 
decade, both of the above two QIS ideas have triggered significant research activity (see, e.g., 0-0), and : 



schemes have already been experimentally realized 20, 21]. 
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A more general QIS scheme should involve the asymmetry between the powers of the different participants, 
where only particular subsets of the participants can recover the secret quantum state by cooperation. For 
instance, one might consider a scheme with three participants A, B, and C. The sets (A, B) or (A, C) 
can reconstruct the secret state, but (£>, C) can not. In this example, the presence of A is essential to 
reconstructing the secret state, but not sufficient. The asymmetric QIS has been intensively studied with 
the idea of quantum error-correcting codes based on multi-particle nonlocal operations Although an 



asymmetric three-party QIS scheme has also been put forward [22j with a four-partite entangled state [23 25] 
and classical communications, there has been no intensive study on this issue. 

In this paper, we propose a multiparty asymmetric QIS scheme with a multipartite-entanglement channel 
and classical communications. The scheme involves two grades of agents G\ = {Bobi, Bob2, • • • , Bob m } and 
G*2 = {Charliei, Charlie 2 , Charlie„}. For getting boss's (Alice's) secret state, one of Bobs needs the 
collaboration of the other Bobs and any one of Charlies, while one of Charlies needs the collaboration of all the 
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other m + n — 1 agents. This indicates that the agents who belong to different grades have different authorities 
to recover boss's secret state. Such a type of QIS is referred to as the hierarchical QIS hereafter. Note that the 
collaboration of the agents is based on single-particle measurements and classical communications, and they do 
not need to make any nonlocal operation. 

We now introduce the hierarchical QIS in detail. The quantum channel shared among Alice, Bobs, and 
Charlies is an (1 + m + rt)-qubit graph state given by 

\G)\+m+n = 2^ A ^ B ^ B ^ 

+ |0 j4 Bl B2 • 

+ |l J 4l_B 1 ls 2 ' 

-|Ul Bl l B2 ---l Bm l Cl lc 2 ---lc„». (1) 

By performing, respectively, each qubit except £?i and C\ a Hardamard transformation H = (|0)(0| + |1)(0| + 
|0)(1| — |l)(l|)/\/2, one can transform the graph state of Eq. (p} into the standard form |26| 

\ Stand -) = ^Tn)j2 + 

®(|0 Bl > + |l Bl )<7| 2 ---a| m <7^) 
®(|0 B2 ) + |l B2 ))---(|0 Bm ) + |l Bm )) 
®{\0c 1 ) + \lc 1 )<rt h ---ohJ 

®(|0c 2 ) + |lc 2 ))---(|0cJ + |lc„», (2) 

where cr| = |0j)(0j| — is the usual Pauli operator. Here qubit A is held by Alice, qubit Bi by Bob^ 

(i = 1, 2, • • • , m), and qubit CV by Charlie^ (i' = 1, 2, • • • , n). The quantum state to be distributed is described 
by 

\&s = a\0s)+P\ls), l«| 2 + l/3| 2 = 1- (3) 

The state of the whole system is 



|W> = |Os®|0}l+m+n 
1 

+(3\l s 0A)\<p) m+n + P\lslA)W m+n ), (4) 



= («|OsOA)|v>m+n + «l slA)|v>m+n 



where 



\v)°m+n = ^|0 Sl B2 ---0 Bm )(|0 Cl 0c 2 ---0 C „) 

+|lc 1 lc 2 ---lcj) ! 

Mln+n = ^B 1 lB 2 ---l Bm )(\0c 1 C2 ---0 C J 

-|l Ci l C2 ...l c J). (5) 

In order to implement QIS, Alice performs a joint measurement on her two qubits S and A in the Bell basis 
{l^)sA' Wsa}' an( l tben informs agents of the outcome by classical communication. The four Bell states are 
given by 

1 



*>)sa = -^WsQa) ±|l.sTl)i. 
1 



= ^=(.\0sU) ± \1s0a)). (6) 

For Alice's four possible measurement outcomes, l^)^ or 1^)^, the qubits held by Bobs and Charlies collapse 
correspondingly into the following entangled states: 

\<t>)m+n = a \f)m+n ± /%>m+n' 

Wm+n = «^)m+n ± Pl&m+n- ( 7 ) 
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TABLE I: The one-to-one correspondence between Bobi's unitary operations and the measurement outcomes of Alice, 
Charlie* , and the other Bobs. 
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The non-cloning theorem 27, 28j allows only one qubit to be in the secret state so that any one of the m + n 



agents, but not all, can recover such a state 

/m+n I Yl rn+n 



First, we assume that they agree to let Bobi possess the secret. We rewrite |0) TO+ „ and \4>)m+n as 



/ m+n 
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where |±) = (|0) ± \l))/\/2 and the following notations are used: 

j [(-X-l)/2] 

|X-l,JT) = ^ =i j 7 2 E V^ +1 |{-' 2fc + 1 >^+' X - 2fc - 1 »' 

1 [X/2] 

|X,X)= )/2 E yfCf |{-,2fc};{+,X-2fc}), (9) 

with X being an integer, [x/2] (x = X,X - 1) being the integer part of x/2, Cf = X!/i^!(J5f - K)\ {K = 
2k, 2k + 1) being the combinational coefficient, and |{— , K}; {+, X — K}) denoting all the totally symmetric 
states including K "-" and X - K "+" (e.g., |{-, l};{+,2- 1}) = (| - +) + | + -))/y/2). It can be seen from 
Eq. ((SJ that the other m— 1 Bobs and one of Charlies (denoted by Charlie*) can assist Bobi in recovering Alice's 
secret state. Particularly, Bobs measure their qubits in the basis {|+), |— )} and Charlie* measures his qubit 
in the basis {|0), |1)}, and inform Bobi of their measurement outcomes. For reconstructing the state Bobi 
needs to perform one of the unitary transformations {J, a x , ia y , a z } on qubit B±, where / is the identity operator 
and a x,v,z are the usual Pauli operators. The one-to-one correspondence between Bobi's operations and the 
measurement outcomes of Alice, Charlie*, and the other Bobs is shown in Table 1. V sum = Vg x © Vcharlie* 
with being the modulo-2-sum, where Vcharlie* and Vg x denote the values of the outcomes obtained by 
Charlie* and Bobs, respectively. The states {|{ — , 2k}\ {+, X — 2k}), \0)} are encoded as the value "0" and 
{|{— , 2k + 1}; {+, X — 2k — 1}), |1)} as "1". For instance, Alice's Bell-state measurement outcome is \$> + )sa, 
even number of Bobs get the outcome |— ) {Vg 1 — 0), and Charlie* get |1) {Vcharlie* =1), then Bobi needs 
to make a z operation on qubit B\ for reconstructing Alice's secret state |£) on it. The above results are also 
applicable to the case where one of the other Bobs is deputed to possess Alice's secret because \Q)\+ m + n is 
unchanged under the permutation of qubits \B\,Bi, ■ • • ,B m }, which indicates that all the m Bobs have the 
same status in the QIS protocol. 

Now, we consider the case that they agree to let Charliei recover Alice's secret state. Then the states 
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TABLE II: The one-to-one correspondence between Charliei's unitary operations and the measurement outcomes of 
Alice, Bobs, and the other Charlies. 



Alice's outcomes Vd Vg 2 Operations 

H 

a z H 

1 o x H 
1 io y H 
1 H 
1 a z H 
a x H 
ia y H 



|0 ± ) m+n and |V' ± )m+n can be rewritten as 

|0 ± ) m +n = \ i( a \+Ci) ±/3|-Ci))|TO,m) Bl -B m |n- l,n- l)c 2 -c„ 
+ ( a hci> ± m) Bl -B m \n-2,n- l)c 2 -c„ 

+ (a|+Ci> T - l,m) Bl ... Bm |n - l,n - l)c 2 -C„ 

+ ( a hci> T /?|+Ci))|?n - 1, m) Bl -B m \n -2,n- l)c 2 -c n ] , 

IV' ± )m+n = -[(a\- Cl ) ± 0\+c 1 ))\rn,rn) Bl ---B m \n- l,n- l)c 2 ---c n 
+(a\+ Cl ) ± /3|-ci))|^, m) Bl -B m \n-2,n- l)c 2 -c n 
-(«hci> T/3|+Ci))|m- l,m) Bl -s m |n - l,n- l)c 2 -c„ 
-(al+d) T l,m) Bl ... Bm \n-2,n- l)c 2 -c n ] • (10) 

It can be seen that Charliei can reconstruct the state |£) if and only if m Bobs and the other n — 1 Charlies 
measure their qubits in the basis {|+), |— )} and broadcast their outcomes. In other words, Charliei needs the 
help of all of the other agents for recovering Alice's secret. For reconstructing the state Charliei needs to 
perform one of the unitary transformations {H, a x H, ia v H, a z H} on qubit C\. The one-to-one correspondence 
between Charliei's operations and the measurement outcomes of Alice and the other agents is shown in Table 
2. Vgi an d Vg 2 denote the values of the outcomes obtained by Bobs and Charlies, respectively. The above 
results are also applicable to the case where one of the other Charlies is deputed to possess Alice's secret 
because \G)i+ m +n is unchanged under the permutation of qubits {C\, C2, ••• ,C n }, which indicates that all the 
n Charlies have the same status in the QIS protocol. 

According to former analysis, for recovering the secret state one of Bobs only needs the assistance of 
any one of Charlies with the other Bobs, while one of Charlies needs the help of all of Bobs with the other 
Charlies. Thus, their authorities for getting Alice's secret are hierarchized, and Bobs are in a higher position 
relative to Charlies. This result may be understood partially from the picture as follows. After Alice's Bell-state 
measurement, with outcomes | < I )± )sa or I^^sa, Bobs' and Charlies' single-qubit state-density matrices are, 
respectively, 

= i«l 2 |o><o| + |^| 2 |l><lj, 
p£^l 2 |o><o| + M 2 |i}(i|, 

PCfcar«e = ^(|0><0| + |l)<l|), (11) 

where the superscripts and |'I ,± ) denote Alice's measurement outcomes. It can be seen that each Charlie 
knows nothing about the information of Alice's secret state |£) without the collaboration of the other agents; 
each Bob, however, has the amplitude information of |£) as long as receiving Alice's Bell-state measurement 
outcome. This implies that Alice's secret quantum state is distributed to Bobs and Charlies asymmetrically. 
Naturally, the more information is known, the less collaborations are needed. 
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We now give a brief discussion on the security of this scheme against a potential eavesdropper (say 
Eve). Because of the no-cloning theorem 27 , 28 1 and entanglement monogamy [2^, the only way for Eve 
to eavesdrop the secret state is to take the intercept-resend attack. Particularly, Eve intercepts all the qubits 
(B\, B2, • • • , B m ,Ci,C2, • • • ,C n ) that are sent by Alice to Bobs and Charlies (because which one of Bobs or 
Charlies will possess the secret state is previously undefined in the scheme), and then resends fake qubits (de- 
noted by B[, B' 2 , • • • , B' m , C(, C' 2 , • • • , C' n ) to Bobs and Charlies. For keeping the quantum correlation among 
Bobs and Charlies as good as possible, Eve may prepare the m + n fake qubits in the graph state 



\Q) 



^(|0 S ;0 B - •••0 B ^0 ci c ---0c;) 

+|o B; o B ---o^i c; i cr --i c;i ) 

1*4 lc;lc£---lc;>). 



(12) 



However, the quantum correlation between Alice and Bobs and Charlies is destroyed. Alice, Bobs, and Charlies 
can easily detect such an attack by performing suitable local measurements on the qubits they own or receive. 
For example, they all select the measurement basis {|0), |1)}: under Eve's attack, there is no correlation be- 
tween the measurement outcomes of Alice and Bobs (or Charlies); however, in the no-eavesdropping case, the 
measurement outcome of Alice is always correlated (i.e., the same) with that of Bobs and anti-corrclated with 
that of Charlies. Thus, the eavesdropping attack can always be detected by checking the quantum correlation 
of the entanglement channel, due to the fact that entanglement is monogamous [29( . For checking the security, 
a subset of entanglement channels will be sacrificed. As a matter of fact, most of entanglement-based quantum- 
communication schemes need ones to utilize quantum correlations and sacrifice a subset of entanglement channels 
to check the security against eavesdroppers' interceptions. 

In conclusion, we have proposed a multiparty hierarchical QIS scheme, where the agents are divided into two 
grades (Gi and G2) and the number of agents in both grades can be arbitrary in principle. The agents of grade 
Gi have a larger authority (or power) than the ones of grade G2 to recover the sender's secret state. Except for 
sender's Bell-state measurement, no nonlocal operation (multi-particle operation) is involved in our scheme, in 
contrast to previous asymmetric QIS schemes based on the idea of quantum error-correcting codes where multi- 
particle collective operations are required The proposed scheme have also been shown to be secure against 
eavesdropping. Our scheme may be considered as a complementarity to conventional (symmetric) QIS schemes 
without using quantum error-correcting codes. In addition, the hierarchical QIS may be very interesting with 
respect to the reliability of participants in quantum communication and the access controlling in architecture of 
quantum computer [4I |q [22j| . The quantum channel in our scheme is a graph state, a very important quantum 



resource for quantum- information science 3JJ-132J . Recently, other types of QIS schemes with graph states have 



also been presented 33, 34j]- These schemes, however, are very different from ours. What discussed in Ref. [i 
are (N, 7V)-threshold and (3, 5)-threshold (symmetric) QIS protocols based on quantum error-correcting codes. 
Ref. 34] is focused on two-party QIS with four- or five-qubit graph states. The key points for physical realization 
of the presented QIS scheme are preparation of graph state \G)i+ m +n of Eq. ([T]) and Bell-state measurement. 
Bell-state measurement is well within state of the art for both photon- and matter-qubits 35J, l36|. The graph 
state \G)i+m+n can be efficiently generated through realistic linear optics with the idea of Ref. |37[. \G)i+2+3 
has already been experimentally realized 
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